Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

precreate arbitrary code execution #276

Open
baszalmstra opened this issue Nov 10, 2024 · 0 comments
Open

precreate arbitrary code execution #276

baszalmstra opened this issue Nov 10, 2024 · 0 comments

Comments

@baszalmstra
Copy link

While porting the code to Rust I came across the precreate field. If I read the code correctly this allows executing arbitrary code at installation time which is a security risk. I am on personal vendetta against this in conda (link scripts too). 😺

I could not find a use of this in any conda-forge feedstock so I was wondering what the usecase for this would be?

Would it be possible to do achieve the same result without executing arbitrary code?

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
Status: 🆕 New
Development

No branches or pull requests

1 participant